$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9hBasWCSrNJKXvobnFwXLp8pbYE.roa File: 9hBasWCSrNJKXvobnFwXLp8pbYE.roa (raw, json) Hash identifier: 4MsuTucqQUdAa1mU9xEbF6m7mizqWE6X+gIyTJQ0DQs= Subject key identifier: F6:10:5A:B1:60:92:AC:D2:4A:5E:FA:1B:9C:5C:17:2E:9F:29:6D:81 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1835 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9hBasWCSrNJKXvobnFwXLp8pbYE.roa Signing time: Tue 31 Mar 2026 08:05:29 +0000 ROA not before: Tue 31 Mar 2026 08:05:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6197 (0x1835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F6105AB16092ACD24A5EFA1B9C5C172E9F296D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:b8:8e:dd:2f:91:6d:eb:65:03:f5:5b:48: d1:7a:4c:75:a8:94:f6:c5:c5:be:5a:97:1f:3d:05: 06:36:80:71:52:03:bc:27:5a:94:85:7d:23:2a:32: 55:7c:1c:c7:d3:2f:4a:39:ab:b8:fa:1c:b2:85:6a: e3:7f:04:94:8f:76:9a:eb:71:4c:e8:e5:2a:ee:13: 97:d0:63:30:11:f3:86:89:fa:5e:4d:6f:f9:a8:5d: af:7e:0d:f8:83:27:9c:d6:a5:9d:eb:18:d6:7c:38: 8c:e3:3f:45:5a:57:8b:dc:e4:65:14:24:35:92:88: 7a:88:55:62:c0:02:8e:a2:22:ca:c4:e9:51:7e:b0: 59:1d:c2:68:f3:85:8a:25:c6:88:40:1c:bf:59:e1: 9a:56:b5:f5:30:03:4d:d7:1c:78:60:7d:32:d5:89: 02:02:17:15:5f:9c:67:c3:d5:60:dd:1f:97:27:13: 53:ca:66:42:5d:5d:05:77:10:a8:c0:e3:be:a9:e6: 44:d2:55:55:2f:7e:4c:b0:77:42:9c:e6:36:05:54: 3e:44:e9:82:d6:d6:26:2f:aa:28:ff:1c:57:26:f4: c8:a2:91:d0:01:e4:b5:a3:28:95:03:83:b1:1d:a2: 76:5c:bb:2e:02:e0:d6:d3:02:6d:d9:e1:83:34:46: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:10:5A:B1:60:92:AC:D2:4A:5E:FA:1B:9C:5C:17:2E:9F:29:6D:81 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9hBasWCSrNJKXvobnFwXLp8pbYE.roa sbgp-ipAddrBlock: critical IPv4: 49.96.192.0/21 Signature Algorithm: sha256WithRSAEncryption c6:3e:f1:ef:32:5c:90:b5:73:8f:6f:6c:99:68:7c:ae:a1:d0: 69:7d:e3:b1:c9:33:81:db:cc:0c:68:60:36:54:7f:ec:d7:39: d2:f5:85:d6:ac:3d:11:9a:16:0d:c3:2a:8a:51:ea:f1:1e:1a: 08:ba:3b:31:c7:ed:8e:e9:c0:3b:20:96:91:d0:c9:ac:00:e2: 25:c3:59:0d:89:df:4d:9c:76:07:42:26:e1:ba:21:7f:c8:1b: 2d:b1:32:9f:6a:68:8e:4e:51:e7:e9:a9:ef:1c:b4:ca:d2:35: 5f:c5:aa:ae:2b:92:3b:59:05:9e:19:eb:41:8e:29:54:cb:f5: a1:67:e3:64:e5:85:cb:cd:f9:26:5a:2e:fc:20:33:6a:4a:3e: 21:db:d9:72:ce:f7:ac:44:65:1f:b2:81:bb:9e:09:60:5b:76: 8e:0d:93:5c:59:54:20:37:48:65:a1:e8:91:49:48:4b:a2:fc: e0:91:62:fc:30:d4:e8:ad:74:02:49:76:dd:5b:66:9e:2d:11: e8:60:eb:c0:2c:1b:37:e9:e0:1b:4a:0f:37:e7:01:15:7d:94: 05:9c:bc:53:6e:d0:0b:0e:5d:6b:50:f8:f3:ce:75:85:76:0d: 75:a0:e7:77:d0:e1:d6:30:cb:b7:d4:05:69:21:56:f3:16:a4: b9:6f:9d:80 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGDUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1MjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2MTA1QUIxNjA5MkFD RDI0QTVFRkExQjlDNUMxNzJFOUYyOTZEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWZLiO3S+RbetlA/VbSNF6THWolPbFxb5alx89BQY2gHFSA7wn WpSFfSMqMlV8HMfTL0o5q7j6HLKFauN/BJSPdprrcUzo5SruE5fQYzAR84aJ+l5N b/moXa9+DfiDJ5zWpZ3rGNZ8OIzjP0VaV4vc5GUUJDWSiHqIVWLAAo6iIsrE6VF+ sFkdwmjzhYolxohAHL9Z4ZpWtfUwA03XHHhgfTLViQICFxVfnGfD1WDdH5cnE1PK ZkJdXQV3EKjA476p5kTSVVUvfkywd0Kc5jYFVD5E6YLW1iYvqij/HFcm9MiikdAB 5LWjKJUDg7EdonZcuy4C4NbTAm3Z4YM0Rk57AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU9hBasWCSrNJKXvobnFwXLp8pbYEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzloQmFzV0NTck5KS1h2b2JuRndYTHA4cGJZRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMxYMAwDQYJKoZIhvcNAQELBQADggEB AMY+8e8yXJC1c49vbJlofK6h0Gl947HJM4HbzAxoYDZUf+zXOdL1hdasPRGaFg3D KopR6vEeGgi6OzHH7Y7pwDsglpHQyawA4iXDWQ2J302cdgdCJuG6IX/IGy2xMp9q aI5OUefpqe8ctMrSNV/Fqq4rkjtZBZ4Z60GOKVTL9aFn42TlhcvN+SZaLvwgM2pK PiHb2XLO96xEZR+ygbueCWBbdo4Nk1xZVCA3SGWh6JFJSEui/OCRYvww1OitdAJJ dt1bZp4tEehg68AsGzfp4BtKDzfnARV9lAWcvFNu0AsOXWtQ+PPOdYV2DXWg53fQ 4dYwy7fUBWkhVvMWpLlvnYA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:01 2026 by rpki-client